Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3234203d3e203533323436.roa
File:                     3137392e36332e39362e302f32322d3234203d3e203533323436.roa (raw, json)
Hash identifier:          rgJcBFblhk1wioOiXVviwyD5rLtTKsPl3MYi7ps6jMs=
Subject key identifier:   1E:33:91:A7:DD:AB:E6:0E:59:7C:14:91:E1:07:ED:38:2E:C6:2C:82
Certificate issuer:       /CN=2BB3C6E1B3894D0F1B92F0735B619C07440E0614
Certificate serial:       05A72CE20884A6DF5338828E2D491A4E1652346C
Authority key identifier: 2B:B3:C6:E1:B3:89:4D:0F:1B:92:F0:73:5B:61:9C:07:44:0E:06:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BB3C6E1B3894D0F1B92F0735B619C07440E0614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3234203d3e203533323436.roa
Signing time:             Thu 18 May 2023 14:51:57 +0000
ROA not before:           Thu 18 May 2023 14:46:57 +0000
ROA not after:            Thu 16 May 2024 14:51:57 +0000
asID:                     53246
IP address blocks:        179.63.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a7:2c:e2:08:84:a6:df:53:38:82:8e:2d:49:1a:4e:16:52:34:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB3C6E1B3894D0F1B92F0735B619C07440E0614
        Validity
            Not Before: May 18 14:46:57 2023 GMT
            Not After : May 16 14:51:57 2024 GMT
        Subject: CN=1E3391A7DDABE60E597C1491E107ED382EC62C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:89:ba:7a:12:9e:24:50:b5:5a:80:e5:9e:
                    2a:b2:4e:02:75:15:d8:4e:bb:df:03:63:fb:2b:39:
                    30:95:55:a0:9b:c5:32:47:99:71:43:16:20:93:c8:
                    d0:e6:91:a5:fd:e8:52:f7:86:bd:3b:81:2a:ea:26:
                    4b:13:da:bb:dc:ea:be:c7:71:55:14:c5:09:85:d7:
                    87:9e:ef:96:c6:8a:ef:ae:4e:b2:7e:6c:c8:10:2c:
                    3c:eb:8c:30:3c:c4:8d:46:53:8a:3c:13:ca:ba:5d:
                    8a:0b:94:65:55:6b:52:24:20:55:71:32:26:ff:2c:
                    d9:b6:b4:f9:3a:52:32:b2:ea:3a:46:30:b5:8b:b1:
                    4e:ae:65:4b:10:97:29:cf:3d:c0:5c:5a:f8:6f:41:
                    12:ff:02:65:65:16:70:9b:0f:00:bb:4f:eb:25:f9:
                    f0:65:9e:a7:c9:56:79:a0:a6:72:e0:5f:5b:90:81:
                    83:73:d2:fb:52:9e:e8:aa:2c:e2:b3:41:c7:27:fb:
                    df:cb:1e:8f:1d:45:47:b4:42:2f:0b:33:e8:7f:a3:
                    32:ef:c2:be:5a:cf:d6:91:54:85:72:8a:9b:fa:a9:
                    86:d9:4a:95:23:14:d8:33:fe:a7:2e:6e:ca:3d:72:
                    e2:aa:d8:17:8c:15:ca:08:23:22:dd:f9:f5:bb:4b:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:91:A7:DD:AB:E6:0E:59:7C:14:91:E1:07:ED:38:2E:C6:2C:82
            X509v3 Authority Key Identifier:
                keyid:2B:B3:C6:E1:B3:89:4D:0F:1B:92:F0:73:5B:61:9C:07:44:0E:06:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/2BB3C6E1B3894D0F1B92F0735B619C07440E0614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BB3C6E1B3894D0F1B92F0735B619C07440E0614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:44:14:17:ad:c9:55:83:a9:b7:2d:64:79:73:e3:7a:16:0f:
         f7:a5:a2:5e:09:3d:7c:b3:57:14:e5:c7:37:64:3b:3d:b2:34:
         b2:32:07:01:b8:e0:26:fa:d0:8d:95:c3:b0:95:91:1f:fb:d6:
         53:4b:e1:7c:a9:74:ae:cf:3e:db:49:47:ae:34:c5:24:a5:e4:
         0b:8f:ed:83:ec:c1:0a:96:e5:0c:4b:06:d9:35:72:de:d4:5a:
         2b:ab:c9:c7:3e:2a:1d:f8:fa:a2:b8:68:44:f5:02:46:9b:9c:
         05:56:f5:05:97:d0:0e:ae:a8:ac:7b:ee:41:f3:91:80:e2:75:
         30:0c:a3:b0:dc:6d:36:59:6d:be:a2:71:ce:bb:b0:55:9e:87:
         5d:a4:1c:32:21:fc:f6:b0:80:1b:22:2d:15:50:95:c8:b3:7d:
         08:c5:d9:b1:27:ea:d8:f9:3e:bb:21:4e:04:bb:76:d6:48:71:
         5a:c8:b3:78:66:0c:83:95:a2:fe:c3:39:01:69:73:22:9e:b8:
         b6:cf:99:22:48:41:35:89:0f:e0:11:e2:79:8d:f2:86:67:1a:
         47:28:4c:33:ff:f8:65:00:fa:23:d0:ff:c7:09:69:97:ee:51:
         79:ce:b0:3e:2b:a2:e6:79:c9:9a:73:82:2a:cd:13:23:61:cb:
         13:81:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:40:48 2025 by rpki-client